Skill UI

A comprehensive expert system for analyzing software codebases to identify, quantify, and prioritize technical debt across various dimensions (code, architecture, testing, infrastructure). It provides detailed metrics, impact assessments (development velocity, quality loss), and actionable, prioritized remediation roadmaps with clear ROI projections.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

A comprehensive guide to implementing technical and organizational measures required by the General Data Protection Regulation (GDPR). This skill covers full lifecycle data protection, including Data Protection by Design, Data Protection Impact Assessments (DPIAs), managing data subject rights (e.g., right to erasure, portability), encryption, pseudonymization, and ensuring cross-border data transfer compliance.

This skill details how to conduct comprehensive Operational Technology (OT) vulnerability assessments using platforms like Claroty xDome. It covers passive asset discovery, correlating vulnerabilities against CISA/ICS-CERT advisories, calculating risk scores, and prioritizing remediation based on operational impact and compliance standards (e.g., IEC 62443, NERC CIP). The provided workflow uses Python to manage asset inventory and vulnerability matching for highly regulated industrial environments.

Provides a structured, comprehensive playbook for managing high-impact ransomware incidents. It guides the response team through initial detection, immediate network containment, detailed damage assessment, recovery decision making (including legal and financial considerations), and secure system restoration. Essential for cybersecurity teams facing active encryption attacks.

This tool guides the process of reviewing security findings from DAST and SAST scanners. It uses the OWASP risk rating methodology to classify vulnerabilities (true positive, false positive, needs review) and calculate a comprehensive risk score based on likelihood and impact, ensuring development teams prioritize the most critical issues.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This comprehensive coach guides users through the entire career lifecycle, from self-assessment and discovering life purpose (Ikigai) to executing advanced job search strategies. It covers writing impactful resumes, mastering salary negotiation, building a strong personal brand, navigating career pivots, and maintaining work-life balance. Ideal for fresh graduates, mid-career professionals, and anyone seeking intentional career direction.

Provides developmental, qualitative, and evidence-traceable review of scholarly works (papers, protocols, ideas). It also rigorously audits low-stakes research assessment rubrics for construct validity, fairness, and governance. Crucially, this tool is strictly forbidden from making high-impact personnel decisions, ranking individuals, or determining final outcomes.

A comprehensive runbook designed to guide developers through responding to Anthropic API incidents, including outages, sustained errors (like 529), and rate limit issues. It covers systematic steps like checking the official status page, classifying incident severity, implementing model fallback logic (e.g., downgrading Opus to Sonnet), and conducting post-incident impact assessments to ensure service resilience.